Privacy notice

This is a translation provided for convenience. The legally binding version is the German one: Datenschutzerklärung.

This website processes as little data as is technically possible. It sets no cookies, uses no analytics or tracking services, and loads no content from third-party servers. Whatever does arise is set out here in full.

1. Controller

The controller for the processing of personal data within the meaning of Art. 4(7) GDPR is:

Karuki Group GmbH i. G.
represented by the managing directors Christian Kania and Daniel Rübenkönig
Josef-Ponten-Straße 30
40595 Düsseldorf
Germany

Email: kontakt@darue.de

No data protection officer has been appointed; the conditions of Art. 37 GDPR in conjunction with § 38 BDSG are not met.

2. Hosting and server log files

The website runs on a virtual server operated by the controller. The underlying infrastructure is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, in the Azure region Germany West Central (data centre in Germany). A data processing agreement is in place with Microsoft; processing takes place within the European Union.

On every request the web server writes technically necessary access data to log files:

• IP address of the requesting device
• date and time of access
• name and path of the file requested
• volume of data transferred and HTTP status code
• browser and operating system identification transmitted
• the previously visited page, where the browser transmits it

Purpose: delivering the page, operational security, detecting and tracing attacks and technical faults.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and stable operation of the website.
Retention: 14 days, then automatic deletion.

The log files are not combined with other data sources and are not used to analyse user behaviour.

3. Encryption

The website is available exclusively over HTTPS; requests over HTTP are redirected to HTTPS. The connection is therefore protected against interception and alteration in transit.

4. No cookies, no tracking

This website sets no cookies and uses no local browser storage. No analytics, statistics, advertising or social media services are embedded. No profiling and no automated decision-making within the meaning of Art. 22 GDPR takes place.

5. No third-party content

All components of the page – stylesheet, graphics and fonts – are served from our own server. In particular, no fonts are loaded from external providers. Visiting this website therefore creates no connection to third-party servers, and no IP address is transmitted to third parties.

6. Contact by email

The website contains no contact form. Anyone writing by email transmits their sender address and the contents of the message.

Purpose: handling the enquiry and any follow-up correspondence.
Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR with the legitimate interest in replying.
Retention: until the matter is concluded and no statutory retention periods apply. Commercial and tax law periods may require longer retention.

The email service for addresses on this domain is operated by united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany, as a processor. Processing takes place in Germany.

One honest note: unencrypted email is not a secure transmission channel. For confidential material, another route should be agreed.

7. Disclosure of data

Personal data is not passed on to third parties, other than to the processors named under items 2 and 6 in the course of their technical service, or where there is a legal obligation to do so. No data is sold or made available for advertising purposes.

8. Your rights

In respect of the personal data concerning you, you have the following rights against the controller:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

A message to the contact address above is sufficient to exercise them. Doing so is free of charge.

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular the authority of your place of residence or of the controller's establishment. The competent authority for the controller is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

10. Obligation to provide data

Transmitting the access data named under item 2 is technically necessary in order to deliver the page; without it, a request is not possible. Beyond that, there is no obligation to provide personal data. Getting in touch is voluntary.

11. Changes to this notice

This notice is adjusted whenever the processing changes – for instance because a service is added or dropped. The version published here applies in each case.

Last updated: 16 September 2026